Update severity in file CVE-2025-8405.json

PSIRT noticed a gap with the current automation and the incorrect severity was published on https://about.gitlab.com/releases/2025/12/10/patch-release-gitlab-18-6-2-released/#cve-2025-8405---improper-encoding-in-vulnerability-reports-impacts-gitlab-ceee

PSIRT Bug Bounty council confirmed the true severity is 7.7 (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) instead of 8.7 (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).

Edited by Kayla Hagopian

Merge request reports

Loading